Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-43946

FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue

Description

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist. Version 1.3.1 patches the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

frangoteam FUXA

  • = 1.3.0affected

References